PT-2021-14238 · Unknown · Optical Bb Unit E-Wmta2.3

Hiroki Nishino · Published 2021-07-28 · Updated 2021-08-09 · CVE-2021-20783

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Optical BB unit E-WMTA2.3

Description: A cross-site request forgery (CSRF) issue allows a remote attacker to hijack the authentication of administrators via a specially crafted page. This can lead to unauthorized access to administrative functions.

Recommendations: For Optical BB unit E-WMTA2.3, consider implementing proper CSRF token validation to prevent hijacking of administrator sessions. As a temporary workaround, restrict access to administrative pages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2021-20783

Affected Products

Optical Bb Unit E-Wmta2.3

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-20783 · Security Note
• https://osv.dev/vulnerability/CVE-2021-20783 · Vendor Advisory
• https://jvn.jp/en/jp/JVN34364599/index.html · Note
• https://t.me/cibsecurity/26604 · Telegram Post